diff --git a/otp/userdb.rb b/otp/userdb.rb
index 3bdfe36..e526fb0 100644
--- a/otp/userdb.rb
+++ b/otp/userdb.rb
@@ -99,7 +99,6 @@
   end
   def authSkey(user, skey)		# ブラウザに残るセッションキーで認証
     expire
-    confirmUserAdd(user)
     r = @db.execute(
       "SELECT user FROM session WHERE user=? AND keytype='sesskey' AND key=?",
       user, skey)
@@ -126,6 +125,7 @@
   end
   def updateSkey(user, sKey)
     expire				# まず時間切れのキーを消す
+    confirmUserAdd(user)
     @db.execute("REPLACE INTO session VALUES(?, 'sesskey', ?,
 	datetime('now', 'localtime', '#{@expire_after}'));", user, sKey)
     addProps(user, "login", Time.now.strftime("%F %T"))